Exploit threats

454 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	–		https://github.com/cockpit-project/cockpit · Cockpit 359 · RCE Medium2026-05-21Exploit-DB RSS Feed Cockpit 359 - RCE Exploit https://cockpit-project.org #web #rce #exploit	Exploit-DB RSS Feed	2026-05-21
Medium	–		PoC Released for DirtyDecrypt Linux Kernel Vulnerability Medium2026-05-19SecurityWeek Patched in April, the underlying vulnerability allows local attackers to elevate their privileges to root. The post PoC Released for DirtyDecrypt Linux Kernel Vulnerability appeared first on SecurityWeek . Exploit #linux #local	SecurityWeek	2026-05-19
Medium	–		Researcher Drops MiniPlasma Windows Exploit for Unpatched 2020 CVE Medium2026-05-18SecurityWeek The researcher dropped the MiniPlasma exploit that uses the original proof-of-concept (PoC) code targeting the bug. The post Researcher Drops MiniPlasma Windows Exploit for Unpatched 2020 CVE appeared first on SecurityWeek . Exploit #windows	SecurityWeek	2026-05-18
Critical	–		PoC Code Published for Critical NGINX Vulnerability Critical2026-05-16SecurityWeek Introduced in 2008, the critical-severity security defect was patched this week in NGINX Plus and NGINX open source. The post PoC Code Published for Critical NGINX Vulnerability appeared first on SecurityWeek . Exploit #rce	SecurityWeek	2026-05-16
High	8.1	KEV	Microsoft Warns of Exchange Server Zero-Day Exploited in the Wild High8.1KEV2026-05-15SecurityWeek Microsoft has shared mitigations for CVE-2026-42897 until a permanent patch can be released for affected Exchange Server versions. The post Microsoft Warns of Exchange Server Zero-Day Exploited in the Wild appeared first on SecurityWeek . KEVExploit	SecurityWeek	2026-05-15
Critical	–		Remote Sunrise Helper for Windows 2026.14 · Remote Code Execution Critical2026-05-15Exploit-DB RSS Feed Remote Sunrise Helper for Windows 2026.14 - Remote Code Execution Exploit #windows #remote #local	Exploit-DB RSS Feed	2026-05-15
Medium	–		Remote Sunrise Helper for Windows 2026.14 · Unauthenticated File/Directory Listing Medium2026-05-15Exploit-DB RSS Feed Remote Sunrise Helper for Windows 2026.14 - Unauthenticated File/Directory Listing Exploit #windows #remote #local	Exploit-DB RSS Feed	2026-05-15
Medium	–		Windows Snipping Tool · NTLMv2 Hash Hijack Medium2026-05-15Exploit-DB RSS Feed Windows Snipping Tool - NTLMv2 Hash Hijack Exploit #windows #local #exploit	Exploit-DB RSS Feed	2026-05-15
Medium	–		PJPROJECT 2.16 · Heap Bufferoverflow Medium2026-05-14Exploit-DB RSS Feed PJPROJECT 2.16 - Heap Bufferoverflow Exploit #web #exploit	Exploit-DB RSS Feed	2026-05-14
Medium	–		ePati Antikor NGFW 2.0.1301 · Authentication Bypass Medium2026-05-14Exploit-DB RSS Feed ePati Antikor NGFW 2.0.1301 - Authentication Bypass Exploit #web #exploit	Exploit-DB RSS Feed	2026-05-14
Critical	–		Apache HertzBeat 1.8.0 · Remote Code Execution Critical2026-05-14Exploit-DB RSS Feed Apache HertzBeat 1.8.0 - Remote Code Execution Exploit #remote #web #exploit	Exploit-DB RSS Feed	2026-05-14
Medium	–		WordPress Plugin Supsystic Contact Form 1.7.36 · SSTI Medium2026-05-14Exploit-DB RSS Feed WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI Exploit #web #exploit #wordpress	Exploit-DB RSS Feed	2026-05-14
Critical	–		Flowise < 3.0.5 · Missing Authentication for Critical Function Critical2026-05-13Exploit-DB RSS Feed Flowise < 3.0.5 - Missing Authentication for Critical Function Exploit #web #exploit	Exploit-DB RSS Feed	2026-05-13
Medium	–		coreruleset 4.21.0 · Firewall Bypass Medium2026-05-13Exploit-DB RSS Feed coreruleset 4.21.0 - Firewall Bypass Exploit #web #exploit	Exploit-DB RSS Feed	2026-05-13
Medium	–		glances 4.5.2 · command injection Medium2026-05-13Exploit-DB RSS Feed glances 4.5.2 - command injection Exploit #web #exploit	Exploit-DB RSS Feed	2026-05-13
Medium	–		Ninja Forms Uploads · Unauthenticated PHP File Upload Medium2026-05-13Exploit-DB RSS Feed Ninja Forms Uploads - Unauthenticated PHP File Upload Exploit #web #php #exploit	Exploit-DB RSS Feed	2026-05-13
High	–		Google Detects First AI-Generated Zero-Day Exploit High2026-05-11SecurityWeek The zero-day was designed to bypass 2FA and it was developed by a prominent cybercrime group. The post Google Detects First AI-Generated Zero-Day Exploit appeared first on SecurityWeek . Exploit	SecurityWeek	2026-05-11
Medium	–		Traccar GPS Tracking System 6.11.1 - Cross-Site WebSocket Hijacking (CSWSH) Medium2026-05-04Exploit-DB RSS Feed Traccar GPS Tracking System 6.11.1 - Cross-Site WebSocket Hijacking (CSWSH) Exploit #web #exploit	Exploit-DB RSS Feed	2026-05-04
High	–		Windows 11 24H2 · Local Privilege Escalation High2026-05-04Exploit-DB RSS Feed Windows 11 24H2 - Local Privilege Escalation Exploit #windows #local #exploit	Exploit-DB RSS Feed	2026-05-04
Medium	–		MindsDB 25.9.1.1 · Path Traversal Medium2026-05-04Exploit-DB RSS Feed MindsDB 25.9.1.1 - Path Traversal Exploit #web #exploit	Exploit-DB RSS Feed	2026-05-04

Page 8 of 23